Bug 29541: Prevent users from another group to access patron's images
authorJonathan Druart <jonathan.druart@bugs.koha-community.org>
Mon, 6 Dec 2021 12:58:25 +0000 (13:58 +0100)
committerKyle Hall <kyle@bywatersolutions.com>
Tue, 25 Jan 2022 19:42:18 +0000 (14:42 -0500)
commit57dbbabecd6cc68b4e7c31f05e33f2c3783fd3d5
tree9b51896f3f7040fb9d60af550d298ce37272791d
parentafbe6adafac8669c5092fc0d974878a538efc18f
Bug 29541: Prevent users from another group to access patron's images

We should respect group restrictions here.

Test plan:
Create a patron from another group of libraries and don't let them
access info from patrons outside of this group.
Access the following link and confirm that you can see the image only
for patrons from their group
  /cgi-bin/koha/members/patronimage.pl?borrowernumber=XX

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>
members/patronimage.pl